Senior Information Assurance Specialist: RMF & Cloud

onezerollc; Arlington (VA); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

401(k) with match

Paid time off

Paid holidays

Employee referral program

Educational assistance

Job summary

OneZero Solutions, LLC is seeking Information Assurance Specialists to support DSCA, delivering RMF and CSRMC across ~25 systems in a cloud-native AWS environment. You will own authorization packages in eMASS, drive control compliance, and push the program toward automated, Compliance-as-Code monitoring.

You will work as ISSO/SCA-Validator, with responsibilities spanning RMF documentation, security control assessments, and risk-based remediation coordination in a hybrid work setting.

Qualifications

• Three years IA experience with RMF, control assessment, POA&M management, and continuous monitoring.
• DoD 8570/8140 qualifying certification (612/722) with CompTIA Security+ CE minimum.
• Active SECRET clearance and US citizenship at start of performance.
• Knowledge of NIST SP 800-53 Rev 5, 800-37/RMF, FISMA, and DoD cybersecurity policy.
• On-site work at Mechanicsburg, PA or Arlington, VA as required.

Responsibilities

• Manage A&A packages through RMF/CSRMC lifecycle in eMASS.
• Support A&A, Assess Only, and cATO accreditations and system categorization.
• Assess security controls across cloud-native services and SaaS against FedRAMP and DoD Cloud SRG.
• Conduct security control assessments via interviews, docs review, testing; validate results.
• Develop and maintain RMF docs: SSPs, SAPs, SARs, and POA&M.
• Leverage CaC outputs to validate compliance against NIST DoD controls in eMASS.
• Monitor posture in CI/CD pipelines and coordinate remediation with dev teams.
• Brief ISSMs and stakeholders on findings, risk posture, and remediation.
• Support incident response for cloud-native systems with CSSP partners.

Skills

RMF execution

POA&M management

A&A

Continuous monitoring

NIST SP 800-53

DoD policy knowledge

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

eMASS

AWS Security Services

ACAS/Nessus

Job description

OneZero Solutions, LLC is seeking Information Assurance Specialists to support DSCA, delivering RMF and CSRMC across ~25 systems in a cloud-native AWS environment. You will own authorization packages in eMASS, drive control compliance, and push the program toward automated, Compliance-as-Code monitoring.

You will work as ISSO/SCA-Validator, with responsibilities spanning RMF documentation, security control assessments, and risk-based remediation coordination in a hybrid work setting.